Rémy Coutable and Robert Speicher
0624d6a7f1
Merge branch 'fix-project-hook-delete-permissions' into 'master'
...
Prevent users from deleting Webhooks via API they do not own
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15576
See merge request !1959
2016-04-27 13:32:55 -04:00
Robert Speicher and Yorick Peterse
6044fd7e46
Merge branch 'rs-notes-privilege-escalation' into 'master'
...
Prevent privilege escalation via notes API
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15577
See merge request !1964
2016-04-27 08:43:33 +00:00
Robert Speicher and Yorick Peterse
c8776b0c57
Merge branch '15579-filter-milestone-confidential-issues-api' into 'master'
...
Prevent information disclosure via milestone API
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15579
See merge request !1961
2016-04-26 08:39:02 +00:00
Robert Speicher and Yorick Peterse
516900b9dc
Merge branch 'fix-private-snippet-api' into 'master'
...
Prevent information disclosure via snippet API
Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/15580
See merge request !1958
2016-04-25 21:51:52 +00:00
Robert Speicher and Yorick Peterse
69821f1a01
Merge branch 'license-templates-and-api-12804' into 'master'
...
License templates when creating/editing a LICENSE file
Closes #12804
See merge request !3660
2016-04-20 10:50:27 +02:00
Rémy Coutable
bfa16dbcfb
Merge branch 'api-fix-annotated-tags' into 'master'
...
API: Present an array of Gitlab::Git::Tag instead of array of rugged tags
The annotated message was always `null` because the wrong array was presented.
The entity requires an array of `Gitlab::Git::Tags` instead an array of raw rugged tags was presented. Since a rugged tag does not respond to `message` to get the annotated message, this was always `null`.
See merge request !3764
2016-04-19 12:31:31 +00:00
Robert Schilling
7fa3a1c05c
Ensure that annoation is presented properly
2016-04-18 20:01:32 +02:00
Felipe Artur
ce96d482d9
Insert users check into api
2016-04-18 11:12:27 -03:00
Michael Greene
c1467f5d97
Allow back dating notes on creation
2016-04-13 12:04:09 -05:00
Michael Greene
28a7fe25fd
Allow back dating issues on update
2016-04-13 12:04:09 -05:00
Rémy Coutable
c8560894f7
Merge branch 'api-subscribe-issue-mr' into 'master'
...
API: Subscribe and unsubscribe from issues and merge requests
* Closes #6024
This MR is based on !3611 , which must be merged first.
See merge request !3615
2016-04-13 15:54:31 +00:00
Robert Schilling
a9200d93d3
Ensure that issues and merge requests are found
2016-04-13 17:15:42 +02:00
Rémy Coutable
94e130cec3
Merge branch 'api-star-project' into 'master'
...
API: Star and unstar a project
Add two new endpoints `POST /projects/:id/star` and `POST /projects/:id/unstar` to star and unstar a project.
* Closes #12739
See merge request !3578
2016-04-13 15:05:21 +00:00
Robert Schilling
54231aa4e0
Styling changes to code and docs
2016-04-13 16:25:24 +02:00
Robert Schilling
3ab9ea8dae
Make staring API more restful
2016-04-13 14:26:41 +02:00
Robert Schilling
ea2193aaeb
API: Star and unstar a project
2016-04-13 14:26:40 +02:00
Robert Schilling
fa3009095f
Make subscription API more RESTful
2016-04-13 13:52:13 +02:00
Robert Schilling
f875189b39
API: Ability to subscribe and unsubscribe from a merge request
2016-04-13 13:45:01 +02:00
Robert Schilling
bd0be13f5b
API: Ability to subscribe and unsubscribe from an issue
2016-04-13 13:45:00 +02:00
Rémy Coutable
cf306b17bf
Merge branch 'api-group-leaking' into 'master'
...
API: Return 404 if user does not have access to group
Closes #15185
After !3587 is merged, I'll update this one to also fix the return code of the tests in !3587 .
See merge request !3683
2016-04-13 11:32:25 +00:00
Robert Schilling
4cd04443f5
Fix group_member_spec to not leak information
2016-04-13 12:10:12 +02:00
Robert Schilling
2b036025d6
Update tests for moving issues via API
2016-04-13 11:31:50 +02:00
Robert Schilling
482f67edb4
API: Ability to move an issue
2016-04-13 11:23:42 +02:00
Robert Schilling
ca40479c51
API: Avoid group leak while updating the group
2016-04-13 11:20:45 +02:00
Robert Schilling
b2f48d8c46
API: Return 404 if user does not have access to group
2016-04-13 11:11:09 +02:00
Rémy Coutable
fc9e1be1fd
Merge branch 'api-group-visibility' into 'master'
...
API: Ability to update a group
This makes it much easier to update a group after introducing the group visibility.
* Closes #14991
See merge request !3587
2016-04-13 08:23:29 +00:00
Robert Schilling
5fb572417e
Fix minor issues according development guidelines
2016-04-12 19:08:35 +02:00
Rémy Coutable
e322b993e7
Merge branch 'api-delete-note' into 'master'
...
Delete notes via API
Supports deleting issues, snippets, and merge requests via the API.
* Closes #14944
* Closes #14845
* Closes #6060
@zj I did not see that you assigned yourself in #6060 . Hopefully, you did not start yet.
@rymai In #6060 this is targeted for 8.7 release. Could you review that and maybe this still lands in 8.7.
See merge request !3557
2016-04-12 14:34:50 +00:00
Rémy Coutable
a5512099ce
Merge branch 'api-get-tag' into 'master'
...
API: Ability to retrieve a single tag
* Closes #14330
/cc @dblessing
See merge request !3577
2016-04-12 14:04:40 +00:00
Robert Schilling
d0cdc2ee73
API: Ability to update a group
2016-04-12 15:47:20 +02:00
Robert Schilling
dc39c8372d
Adapt tests to new testing guidelines
2016-04-12 15:43:29 +02:00
Zeger-Jan van de Weg
6dbcb880cc
Allow a project member to leave the projected through the API
2016-04-12 14:30:42 +02:00
Robert Schilling
9aefaa41ab
Fix code review issues
2016-04-12 14:24:05 +02:00
Robert Schilling
ba21c00f01
Delete notes via API
2016-04-12 14:24:05 +02:00
Robert Schilling
f81352f531
Fix minor styling issues from code review
2016-04-12 14:12:30 +02:00
Robert Schilling
20d4ca4cc3
API: Ability to retrieve a single tag
2016-04-12 12:38:59 +02:00
Robert Schilling
9d03e8fd5c
API: Add iid filter to milestones
2016-04-12 12:37:16 +02:00
Rémy Coutable
92897d7683
Merge branch 'api-filter-milestone' into 'master'
...
API: Ability to filter milestones by state
Ability to filter milestones by `active` and `closed` state.
* Closes https://gitlab.com/gitlab-org/gitlab-ce/issues/14931
See merge request !3566
2016-04-07 08:45:35 +00:00
Robert Schilling
dc3272dccb
Revert "API: Ability to retrieve a single tag"
...
This reverts commit 7f287c9136 .
2016-04-06 21:03:24 +02:00
Robert Schilling
e6215a9a8e
Improve coding and doc style
2016-04-06 20:53:17 +02:00
Robert Schilling
0728588c34
API: Ability to filter milestones by state
2016-04-06 20:39:43 +02:00
Robert Schilling
7f287c9136
API: Ability to retrieve a single tag
2016-04-06 13:59:50 +02:00
Douwe Maan
df725aec98
Merge branch 'add-ability-to-archive-a-project-via-api-14296' into 'master'
...
Add endpoints for archiving and unarchiving
Closes #14296
See merge request !3372
2016-04-03 13:19:25 +00:00
Robert Speicher
999ae7f76b
Merge branch 'mariusz_jachimowicz/gitlab-ce-i_14415_expose_label_description' into 'master'
...
api - expose label description
Resolves #14415
See merge request !3314
2016-03-29 16:21:16 -04:00
Zeger-Jan van de Weg
b231742687
Merge branch 'master' into add-ability-to-archive-a-project-via-api-14296
2016-03-29 16:14:59 +02:00
Abhi Rao
762d6ab4fd
Ensuring Merge Request API returns boolean values for work_in_progress
...
Fixes #14692
2016-03-28 22:11:44 -05:00
Zeger-Jan van de Weg
473b261261
Back dating of issues when creating throught the API
2016-03-28 16:45:36 +02:00
Mariusz Jachimowicz
c8be7f1cf0
api - expose label description
2016-03-24 18:44:52 +00:00
Zeger-Jan van de Weg
3549d7c1d4
PUT becomes POST on archiving endpoints
...
Also the specs have a minor improvement. Mainly the access right spec.
Changes are reflected in the docs
2016-03-24 18:58:42 +01:00
Zeger-Jan van de Weg
2c5bcf2e1b
Add endpoints for archiving and unarchiving
2016-03-23 22:36:35 +01:00